
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
File: B3vNZjsOY7316bgJr3Gu8eWt9js.mft (raw, json)
Hash identifier: oqS54bYV2JMKY1Z+Fk/OIX4OUiEpCtiAROpgOXK8zsg=
Subject key identifier: 09:27:02:20:4C:06:46:71:21:92:FF:29:B2:5D:E9:F8:A3:15:5C:ED
Authority key identifier: 07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B
Certificate issuer: /CN=A9134309/serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
Manifest number: 53
Signing time: Mon 03 Nov 2025 07:15:51 +0000
Manifest this update: Mon 03 Nov 2025 07:15:51 +0000
Manifest next update: Mon 10 Nov 2025 07:15:51 +0000
Files and hashes: 1: B3vNZjsOY7316bgJr3Gu8eWt9js.crl (hash: FNfSHN3S8hGdP+KFo/juT61bbFA/AJJQD6A/kinmfLs=)
2: 0322BF5A6D3411F0A208C05DC4F9AE02.roa (hash: WQ8BuE65YXtQyTIurkyDNftfUcfnYZp85uvlHfPR7PU=)
3: 13CC532280EC11F0A973810CC4F9AE02.roa (hash: YUDZaJzqTJAMIH2aYnffmm6rXB/hTcHYJMvuVkjpDWs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl
rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 07:15:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134309, serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
Validity
Not Before: Nov 3 07:15:51 2025 GMT
Not After : Nov 10 07:15:51 2025 GMT
Subject: CN=690856a7-fd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:70:8b:d1:36:ab:84:22:18:6f:ec:eb:1e:e3:
2e:b4:c4:0e:ca:a2:76:02:65:95:ea:9d:00:64:86:
ee:1b:fc:0f:ff:56:52:75:b3:da:8d:2e:52:f9:77:
59:f3:e9:49:16:0e:d6:99:8e:33:ca:4b:cd:5c:52:
87:70:fe:f9:06:6b:7e:28:f5:07:11:db:44:b1:cc:
2b:e1:fc:ae:95:b9:8f:45:9e:7f:52:a0:5a:37:80:
63:33:da:b8:eb:4b:c2:5f:96:43:fe:9e:e3:ec:06:
40:b3:3c:9e:16:7e:7b:b3:fe:9e:21:30:52:e5:ea:
18:e7:98:04:63:d9:61:e4:18:cf:00:75:38:e0:33:
a7:3b:c5:c8:ae:22:5a:25:5b:c6:d3:4b:de:b9:54:
0e:ec:bd:a2:29:a0:bf:87:b7:48:85:cf:6b:10:46:
05:71:f3:85:cd:c1:39:03:c9:0e:4f:e4:c1:24:e8:
b7:4c:53:04:d7:18:b8:a0:c3:29:b6:80:ed:91:d0:
1d:54:22:53:43:43:4b:6e:0c:c5:d3:8c:19:21:20:
ce:0a:93:61:7c:20:08:d9:72:d7:38:ff:8c:03:f5:
43:e5:0b:02:f7:b0:e5:03:36:59:1b:95:f8:8e:79:
b8:cb:a8:10:47:7f:15:0d:bf:1b:2f:e5:e6:f3:36:
a7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:27:02:20:4C:06:46:71:21:92:FF:29:B2:5D:E9:F8:A3:15:5C:ED
X509v3 Authority Key Identifier:
keyid:07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:36:0d:5e:c7:76:f4:99:af:7d:a6:cc:6e:1c:8c:38:6f:13:
4d:bd:ac:74:9a:32:b6:69:38:cb:76:30:c2:6f:87:8a:19:4e:
9d:08:fb:8a:e8:2d:51:ea:03:dc:80:88:20:59:72:99:b4:94:
38:79:a9:91:57:58:90:08:60:84:02:7f:5b:5d:82:08:2d:3b:
b9:83:5a:9d:3b:a3:8f:37:3e:64:68:41:2d:ae:3e:b0:88:ba:
6e:82:53:48:2e:7e:78:89:b1:bf:1c:5b:23:58:9a:57:54:e3:
af:42:94:6d:a0:e0:5d:ed:04:85:43:e1:80:67:c4:97:1d:17:
7b:8d:b0:f4:45:4e:a9:7f:ea:34:00:fa:08:99:31:7a:51:b4:
16:3e:ba:eb:d4:c5:04:84:7a:f2:ee:60:90:fa:09:66:d2:28:
96:36:10:f6:34:fe:33:b4:05:6f:3c:70:d4:3f:be:4e:3b:dc:
e1:36:68:94:6b:47:00:81:d8:0a:f7:16:d9:b2:30:57:f0:fb:
ed:af:1c:d1:c8:ad:cb:3f:cf:46:af:86:5c:cc:6f:0f:8f:2b:
0f:a8:7a:5b:2e:51:4d:22:67:6e:c3:53:58:0c:51:08:42:f3:
f3:5d:4e:37:b0:80:b2:f4:44:69:77:93:af:5b:86:dd:08:48:
8b:48:84:07
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
NDMwOTExMC8GA1UEBRMoMDc3QkNENjYzQjBFNjNCREY1RTlCODA5QUY3MUFFRjFF
NUFERjYzQjAeFw0yNTExMDMwNzE1NTFaFw0yNTExMTAwNzE1NTFaMBgxFjAUBgNV
BAMTDTY5MDg1NmE3LWZkMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDccIvRNquEIhhv7Ose4y60xA7KonYCZZXqnQBkhu4b/A//VlJ1s9qNLlL5d1nz
6UkWDtaZjjPKS81cUodw/vkGa34o9QcR20SxzCvh/K6VuY9Fnn9SoFo3gGMz2rjr
S8JflkP+nuPsBkCzPJ4Wfnuz/p4hMFLl6hjnmARj2WHkGM8AdTjgM6c7xciuIlol
W8bTS965VA7svaIpoL+Ht0iFz2sQRgVx84XNwTkDyQ5P5MEk6LdMUwTXGLigwym2
gO2R0B1UIlNDQ0tuDMXTjBkhIM4Kk2F8IAjZctc4/4wD9UPlCwL3sOUDNlkblfiO
ebjLqBBHfxUNvxsv5ebzNqfLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCScCIEwG
RnEhkv8psl3p+KMVXO0wHwYDVR0jBBgwFoAUB3vNZjsOY7316bgJr3Gu8eWt9jsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0MzA5L0Q0MUZBMzJDM0VF
MzExRjBCOTM5ODQ0MkM0RjlBRTAyL0Izdk5aanNPWTczMTZiZ0pyM0d1OGVXdDlq
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvQjN2Tlpqc09ZNzMxNmJnSnIzR3U4ZVd0OWpzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0
MzA5L0Q0MUZBMzJDM0VFMzExRjBCOTM5ODQ0MkM0RjlBRTAyL0Izdk5aanNPWTcz
MTZiZ0pyM0d1OGVXdDlqcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAEk2DV7HdvSZr32mzG4cjDhvE029rHSaMrZpOMt2MMJvh4oZTp0I+4ro
LVHqA9yAiCBZcpm0lDh5qZFXWJAIYIQCf1tdgggtO7mDWp07o483PmRoQS2uPrCI
um6CU0gufniJsb8cWyNYmldU469ClG2g4F3tBIVD4YBnxJcdF3uNsPRFTql/6jQA
+giZMXpRtBY+uuvUxQSEevLuYJD6CWbSKJY2EPY0/jO0BW88cNQ/vk473OE2aJRr
RwCB2Ar3FtmyMFfw++2vHNHIrcs/z0avhlzMbw+PKw+oelsuUU0iZ27DU1gMUQhC
8/NdTjewgLL0RGl3k69bht0ISItIhAc=
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:21:38 2025 by rpki-client